A. It failed the RPF check.
B. The next-hop IP address is unreachable.
C. It matched an explicitly configured firewall policy with the action DENY.
D. It matched the default implicit firewall policy.
A. port1-vlan10 and port2-vlan10 are part of the same broadcast domain.
B. port1-vlan and port2-vlan1 can be assigned in the same VDOM or to different VDOMs.
C. Traffic between port2 and port2-vlan1 is allowed by default.
D. port1 is a native VLAN.
A. Packet payload
B. Ethernet header
C. IP header
D. Interface name
E. Application header
A. Dead peer detection must be disabled to support this type of IPsec setup.
B. The TunnelB route is the primary route for reaching the remote site. The TunnelA route is used only if the TunnelB VPN is down.
C. This setup requires at least two firewall policies with the action set to IPsec.
D. This is a redundant IPsec setup.
A. Static routes are required to allow traffic to the next hop.
B. By default, all interfaces are part of the same broadcast domain.
C. FortiGate forwards frames without changing the MAC address.
D. The existing network IP schema must be changed when installing a transparent mode.
A. Local traffic logs
B. Security logs
C. System event logs
D. Forward traffic logs
A. The action on the firewall policy must be set to deny.
B. Web filter should be enabled on the firewall policy to complement the antivirus profile.
C. The firewall policy must be configured in proxy-based inspection mode.
D. The firewall policy does not apply deep content inspection.
A. It limits the scope of application control to scan application traffic using parent signatures only
B. It limits the scope of application control to the browser-based technology category only.
C. It limits the scope of application control to scan application traffic based on application category only.
D. It limits the scope of application control to scan application traffic on DNS protocol only.
A. Automated Response
B. Optimization
C. Fabric Coverage
D. Security Posture
